10/26/2006 23:39 FAX 732 530 9808 PATTERSON & SHERIDAN PTO 12] 005/011 

PATENT 

Atty. Okt. No. 2001-0450 

IN THE CLAIMS 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

1. (Previously Presented) A security mechanism for enabling a user to commence a 
session between a networit peripheral device and a network, comprising: 

an immutable memory element that contains first information including 
application software that Initiates and provides security services; 

a persistent memory element that contains second information to enable the 
security mechanism to configure the network peripheral device to access different 
networks; 

a volatile memory element that contains third infomiation. Including the critical 
data for authentication, said third infomiation erased from the volatile memory at the 
completion of each connection session; and 

a tamper-evident enclosure for enclosing the memory elements. 

2. (Previously presented) The security mechanism according to claim 1 wherein the 
security services include authentication of the security mechanism itself and 
authentication of the user to the networi^ upon receipt of identification information from 
the security mechanism and the user, respectively. 

3. (Original) The security mechanism according to claim 1 wherein the immutable 
memory contains a private key for encrypting the user and security mechanism 
identification information. 

4. (Original) The security mechanism according to claim 1 wherein the immutable 
memory comprises a Read-Only Memory (ROM). 

5. (Original) The security mechanism according to claim 4 wherein the immutable 
memory further includes a Write-once ROM. 

6. (Previously presented) The security mechanism according to claim 1 wherein the 
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persistent memory comprises at least one of one of a Complementary Metal Oxide 
Semiconductor Random Access Memory (CMOSRAM) and a Programmable Read Only 
Memory (PROM). 

7. (Original) The security mechanism according to claim 1 wherein the volatile memory 
comprises a random access memory. 

8. (Original) The security mechanism according to claim 1 wherein the tamper evident 
enclosure readily exhibits any attempt to gain access there through to the memory 
elements enclosed therein. 

9. (Original) The security mechanism according to claim 1 wherein the physical security 
of the security mechanism depends on the degree of tamper resistance of the 
enclosure. 

10. (Previously Presented) A method for facilitating a secure connection session with a 
user between a network peripheral device and a network, comprising the steps of: 

accessing an immutable memory element that contains first information that 
provides security services; 

accessing a persistent memory element that contains second information 
including configuration information to enable the security mechanism to configure the 
network peripheral device to access the networic; 

accessing a volatile memory element that contains third information, including 
critical data for authentication; and 

erasing said third information not later than the end of the connection session so 
no third information remains in the volatile memory between sessions. 

1 1 . (Original) The method according to claim 10 wherein the security services include 
authentication of the security mechanism itself and authentication of the user to the 
network upon receipt of identification information from the security mechanism and the 
user, respectively. 
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